Jobs › Centene

Senior Infrastructure Security Engineer

Centene · MO · Remote available · $87,000–$161,300 a year · Full time

Posted Sep 3, 2026 · We last checked this listing on Oct 6, 2026

Apply at Centene

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a Breach Attack Simulation exercise you ran. What did it show about your defensive controls?

What they are checking: Whether they have run BAS for real and used the results to drive control improvements.

Tell me about a time you found a serious gap that others had missed.

What they are checking: Whether they dig beyond tool output and can explain how their curiosity led to the finding.

What would you do

Your Attack Surface Management tool finds an exposed asset nobody claims to own. What do you do?

What they are checking: Whether they can track down ownership and get risk reduced instead of letting orphan assets linger.

Infrastructure teams push back on remediation deadlines. How do you get things fixed?

What they are checking: Whether they can drive accountability across teams they do not manage while staying a good partner.

How would you run a BAS exercise in production without disrupting member-facing systems?

What they are checking: Whether they plan safety and coordination carefully in a healthcare environment where outages matter.

About the work

How would you build an accurate inventory of internet-facing assets in a hybrid cloud environment?

What they are checking: Whether they know how to discover assets from many sources and reconcile them into one trusted list.

How do you decide which external exposures to fix first when there are hundreds?

What they are checking: Whether they prioritize by exploitability and business impact rather than raw severity scores.

How do you validate that a detection or prevention control actually works rather than trusting the configuration?

What they are checking: Whether they understand testing controls against real attack techniques, not just checking settings.

What would you put in a monthly report on attack surface and control effectiveness for leadership?

What they are checking: Whether they can produce reporting that shows risk trends and drives decisions instead of raw counts.

How do you review application security architecture to find critical weaknesses?

What they are checking: Whether they can analyze design-level risk, not only scan results.

How do you map your work to frameworks like MITRE ATT&CK?

What they are checking: Whether they use common frameworks to measure coverage and explain gaps in shared terms.

Practice this interview out loud.

Offer builds a real interview for this exact role at Centene from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Centene.

Position Purpose: The Senior Infrastructure Security Engineer is responsible for operating and maturing Centene’s Attack Surface Management (ASM) and Breach Attack Simulation (BAS) programs across hybrid, cloud, on-premises, and enterprise environments. This role strengthens security visibility and risk reduction by validating internet-facing assets, confirming ownership, assessing security coverage, maintaining inventory accuracy, coordinating remediation activities, executing breach attack simulation exercises, validating control effectiveness, and producing actionable reporting. The position partners across security, infrastructure, cloud, application, risk, compliance, and business teams to improve accountability, reduce exposure, validate defensive controls, and support effective security program operations. Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT. • Ensures the implementation and maintenance of application security standards as per industry best practices. • Performs architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement. • Audits of application security and operational configurations. • Monitors & remediates application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc. • Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties. • Automates routine operational tasks related to application security and design self-service options to align with best-in-class security standards. • Implements application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle (SSDLC) process. • Undertakes initiatives/policies to review and generate recommendations for the application security configuration. • Performs other duties as assigned. • Complies with all policies and standards. Education/Experience: A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience. Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position. Technical Skills: • Attack Surface Management: Tenable and Wiz. • Breach Attack Simulation: Wiz and other BAS simulation platforms and control validation tooling. • Asset visibility and vulnerability management: Armis Centrix, Armis VIPR, Tenable, and Wiz. • Workflow, collaboration, and reporting: ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools. Preferred Experience: • Attack Surface Management and external asset discovery. • Breach Attack Simulation, adversary emulation, control validation, and security detection improvement. • Asset inventory management, ownership validation, and security coverage assessment. • Vulnerability management, remediation coordination, and ServiceNow workflow support. • Security reporting, metrics development, process documentation, and cross-functional program coordination. Soft Skills: • Intermediate - Seeks to acquire knowledge in area of specialty • Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions • Intermediate - Ability to work independently • Intermediate - Demonstrated analytical skills • Intermediate - Demonstrated project management skills • Intermediate - Demonstrates a high level of accuracy, even under pressure • Intermediate - Demonstrates excellent judgment and decision making skills License/Certification: • CompTIA Security+ Certification preferred. Pay Range: $87,000.00 - $161,300.00 per year At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday. Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law , including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility. Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act

Apply at Centene